What Is Claimed Is: 



1 LA method for providing identification authentication, comprising: 

2 receiving an identification credential from an individual, including a 

3 biometric data, wherein the identification credential is digitally signed with a 

4 private key; 

5 receiving a biometric sample from the individual; 

6 validating the digital signature using a corresponding public key; 

7 determining if a difference between the digitally signed biometric data and 
y, 8 the biometric data from the individual is below a predetermined threshold; and 

J£ 9 providing the results of the determination to an interested party; 

If] 1 0 whereby the identity of the individual can be authenticated with reference 

|fj 1 1 to the identification credential alone, without having to lookup information for the 

f! 12 individual in a database. 



W 



1 2. The method of claim 1 , further comprising adjusting the 

2 predetermined threshold in accordance with instructions received from a user. 

1 3. The method of claim 1, wherein the identification credential can 

2 include a name, a unique ID, a citizenship, an issue date, an expiration date, an 

3 identifier for an issuing authority, the biometric data, and a digital photo.. 

1 4. The method of claim 1 , wherein the biometric sample can include 

2 one of, or a combination of, a fingerprint, a signature, an iris scan, a facial scan, a 

3 voice pattern, a height, a weight, or a palm scan. 
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1 5. The method of claim 1 , wherein the digitally signed biometric data 

2 is contained in a magnetic stripe, a bar code, a smart card, a chip-card, or a non- 

3 volatile memory, such as flash memory, located on or within the identification 

4 credential. 

1 6. The method of claim 1 , wherein the digital signature is provided by 

2 a central certification authority. 

1 7. The method of claim 1, further comprising granting access to 



2 resources based on the determination if the difference between the digitally signed 

JIT 3 biometric data and the biometric data from the individual is below the 

Isms' 

Q 4 predetermined threshold. 



Z\ 1 8. A computer-readable storage medium storing instructions that 

+ ; 2 when executed by a computer cause the computer to perform a method for 

Si 

0 3 providing identification authentication, the method comprising: 

h \ 4 receiving an identification credential from an individual, including a 

J*?! 5 biometric data, wherein the identification credential is digitally signed with a 

fy 6 private key; 

7 receiving a biometric sample from the individual; 

8 validating the digital signature using a corresponding public key; 

9 determining if a difference between the digitally signed biometric data and 

10 the biometric data from the individual is below a predetermined threshold; and 

1 1 providing the results of the determination to an interested party; 

1 2 whereby the identity of the individual can be authenticated with reference 

1 3 to the identification credential alone, without having to lookup information for the 

14 individual in a database. 

10 
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9. The computer-readable storage medium of claim 8, wherein the 
method further comprises adjusting the predetermined threshold in accordance 
with instructions received from a user. 



1 10. The computer-readable storage medium of claim 8, wherein the 

2 identification credential can include a name, a unique ID, a citizenship, an issue 

3 date, an expiration date, an identifier for an issuing authority, the biometric data, 

4 and a digital photo. 

jjsss; 

h 1 11. The computer-readable storage medium of claim 8, wherein the 

*«} 

J=r; 2 biometric sample can include one of, or a combination of, a fingerprint, a 

3 signature, an iris scan, a facial scan, a voice pattern, a height, a weight, or a palm 

4 scan. 

-3, 

O 1 12. The computer-readable storage medium of claim 8, wherein the 

y, 

fy 2 digitally signed biometric data is contained in a magnetic stripe, a bar code, a 

n 

^ 3 smart card, a chip-card, or a non-volatile memory, such as flash memory, located 

w 

Rj 4 on or within the identification credential. 



1 13. The computer-readable storage medium of claim 8, wherein the 

2 digital signature is provided by a central certification authority. 

1 14. The computer-readable storage medium of claim 8, wherein the 

2 method further comprises granting access to resources based on the determination 

3 if the difference between the digitally signed biometric data and the biometric data 

4 from the individual is below the predetermined threshold. 
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1 1 5. An apparatus for providing identification authentication, 

2 comprising: 

3 a receiving mechanism that is configured to receive an identification 

4 credential from an individual, including a biometric data, wherein the 

5 identification credential is digitally signed with a private key; 

6 a sampling mechanism that is configured to receive a biometric sample 

7 from the individual; 

8 a validation mechanism that is configured to validate the digital signature 
n 9 using a corresponding public key; 

hrr 1 0 a determination mechanism that is configured to determine if a difference 

un 



5 I 



1 1 between the digitally signed biometric data and the biometric data from the 



12 individual is below a predetermined threshold; and 



13 a feedback mechanism that is configured to provide the results of the 

P 14 determination to an interested party; 

py 1 5 whereby the identity of the individual can be authenticated with reference 

pi 

li 16 to the identification credential alone, without having to lookup information for the 

rU 17 individual in a database. 

1 16. The apparatus of claim 15, further comprising an adjustment 

2 mechanism configured to adjust the predetermined threshold in accordance with 

3 instructions received from a user. 

1 17. The apparatus of claim 15, wherein the identification credential can 

2 include a name, a unique ID, a citizenship, an issue date, an expiration date, an 

3 identifier for an issuing authority, the biometric data, and a digital photo. 

12 

Attorney Docket No. ORO 1-23701 Inventor(s). Vipin Samar 

ARPH \ORACLE CORPORATION\OR01 -2370 !\OR0 1-23701 CHANGES DOC 



1 

2 
3 



1 8. The apparatus of claim 1 5, wherein the biometric sample can 
include one of, or a combination of, a fingerprint, a signature, an iris scan, a facial 
scan, a voice pattern, a height, a weight, or a palm scan. 



1 19. The apparatus of claim 15, wherein the digitally signed biometric 

2 data is contained in a magnetic stripe, a bar code, a smart card, a chip-card, or a 

3 non-volatile memory, such as flash memory, located on or within the 

4 identification credential. 

ass;, 

t; 1 20. The apparatus of claim 15, wherein the digital signature is 

UH 2 provided by a central certification authority. 

m 

Si 

J" 



1 21. The apparatus of claim 15, further comprising a security 

2 mechanism configured to grant access to resources based on the determination if 

3 the difference between the digitally signed biometric data and the biometric data 

4 from the individual is below the predetermined threshold. 
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